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II Q Priority 

HI □ Non-establishment of opinion with reparH ™ u 
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Iv I I Lack of unity of invention 

v Reasoned statement under Article l^n\^u 
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I | the international application as originally filed. 

the description, pages 1 -24 M or|gina||y ^ 

pages ■ Hied with the demand. 
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pages 
pages 
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Nos. 



, filed with the letter of 
, filed with the letter of 
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. , as originally filed, 
, as amended under Article 19, 
, filed with the demand, 

, filed with the letter of 

, filed with the letter of 



the drawings. 



sheets/fig 
sheets/fig 
sheets/fig 
sheets/fig 
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. , as originally filed, 
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, filed with the letter of 
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Nos. 
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4. Additional observations, if necessary: 



F rm PCT/IPEA/409 (Box I) (January 1994) 



INTERNATIONAL PRELIMINARY EXAMINATION REPORT 



2. 



International application No. 
PCT/EP 02/00734 



Statement 
Novelty (N) 

Inventive step (IS) 
Industrial applicability (IA) 
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Claims 
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Citations and explanations ~" 

1. The invention relates to a method for modular 

multiplication using a multiplication prediction 
method and a reduction prediction method as 
disclosed in document DE-A-3 631 992. 



The disadvantage of this method is that, when 
calculating the ZDN algorithm, the additional ZDN 
register and the hardware comparator require extra 
chip area. However, the calculation of 2/3 N and the 
calculation of the auxiliary displacement value s x 
in the ZDN algorithm, which is carried out by an 
iterative cycle, is time-critical for the whole 
algorithm and can quite possibly be decisive for the 
total withdrawal time of the algorithm. 

The problem addressed by the present invention 
consists in producing an improved concept for 
modular multiplication which can be implemented in a 
space-saving manner and requires less computational 
time . 

The present invention is based on the realisation 
that a computational time-intensive comparison of 
the updated i ntermediate result with the value ZDN 
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that is, two thirds of the module N, can be 
facilitated if the module N is first transformed 
into the transformed module N T and the total modal 
multiplication is carried out with the transformed 
module N T instead of the actual module 



As Per the invention, the module is transformed such 

that the predetermined portion of the transformed 

module, that is, in a preferred embodiment, two 

thirds of the transformed module, becomes a specific 

number chosen such that it becomes trivial to 

compare 2/3 NT with the intermediate result Z. 

The transformation is carried out such that the 

predetermined portion of the transformed module has 

a higher order position with a first predetermined 

value that is followed by at least one lower order 

position which has a second predetermined value. 

The entire ZDN method is then carripH • t 

-lo <_±ien carried out usxng N . 

A final inverse transformation which modularly 
reduces the transformation result of the modular 
multiplication using the original module N is 
required to produce the result CxM mod N. 

The publication by Colin D. Walter: "Faster Modular 
Multiplication by Operand Scaling", Advances in 
Cryptology, Santa Barbara, ii- 15 August 1991, pages 
313-323 of the Proceedings of the Conference on 
Theory and Applications of Cryptographic Techniques 
(Crypto), Berlin, Springer, discloses a method for 
modular multiplication which uses operand scaling 
and in particular module scaling. The module M, 
which is based on on modular multiplication, is 
multiplied by a factor f such that the scaled module 
fM has a number of q highest value bits which are 
£ixed _This mafces it easie r to calculate a function 
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quotient, since it is no longer dependent on the 
highest value bits of the scaled module, since the 
former are fixed. The function quotient is then 
carried out in a normal manner using the scaled 
module, whereupon up to 2 f final subtractions from M 
take place from the output value of the function 
Said document therefore discloses in general terms 
that a module can be scaled by multiplication with a 
number f so as to obtain a module having highest 
value bits which are fixed. 



■ J 



** 



Form PCT/IPU A/409 (Box V) (January 1994) 



